Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
File:                     4e82ae5d-7c5c-3645-8221-7761cbbab068.roa (raw, json)
Hash identifier:          eadpOZ7lIrIMQb49fqtgfr2F/Hdjfd4/hgYb+uJxH6E=
Subject key identifier:   54:45:97:ED:C9:CB:C1:1F:38:47:7B:9F:F7:4D:6A:5F:7C:2D:99:C4
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F43285845A9BE088D4F491F4B53FB1A80
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     11961
IP address blocks:        216.228.32.0/19 maxlen: 24
                          72.250.128.0/19 maxlen: 24
                          64.89.208.0/20 maxlen: 24
                          108.59.112.0/20 maxlen: 24
                          2607:8380::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:08:8d:4f:49:1f:4b:53:fb:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=89056104-03fd-4769-b484-c5b0c882547d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:bb:92:84:a3:dd:ec:22:fb:5d:6a:c0:a0:
                    0e:84:a0:3c:17:4c:d4:c8:0e:e9:35:7a:20:c2:d9:
                    34:2b:38:e6:68:e9:73:71:c6:5f:1e:0f:c4:5a:c8:
                    44:c8:9e:8d:99:50:76:09:1c:fc:f4:69:d3:f4:94:
                    33:80:c9:6d:8a:51:0c:ca:b5:27:da:77:47:31:ff:
                    6c:92:9d:9d:40:64:cf:75:a0:85:c0:27:95:26:b6:
                    6d:1b:e5:f3:e9:ad:d3:71:c6:ed:ba:21:8c:e3:81:
                    36:5c:14:24:e5:fe:ad:1d:dc:e0:1f:b5:9e:00:5e:
                    42:54:15:6d:9f:4c:34:74:51:d7:e3:e1:9c:78:83:
                    83:f1:82:88:04:cc:3d:c8:c8:d3:5a:0d:17:cb:23:
                    8e:63:4e:ea:f8:fe:9c:2b:79:ae:dd:16:77:57:02:
                    16:99:e9:eb:f4:ae:78:ec:25:a1:d0:18:d4:ac:4b:
                    1a:54:76:7b:e6:d3:7e:33:9a:ee:7a:4d:d7:52:2a:
                    4d:30:b5:ff:1a:ed:04:7c:d0:c0:3a:50:63:9a:cb:
                    1b:07:cb:3f:32:ac:79:93:5f:68:e4:f6:9b:48:0e:
                    50:f1:b9:f7:89:ef:a6:03:7b:86:bf:d2:fc:a6:66:
                    a1:77:96:d7:6c:63:22:ff:87:80:91:2a:82:49:ce:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:45:97:ED:C9:CB:C1:1F:38:47:7B:9F:F7:4D:6A:5F:7C:2D:99:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a1:7f:ce:25:cd:40:65:1d:28:c9:6a:a3:94:f4:0c:b4:67:
         bb:72:4e:6b:5c:f8:06:35:7d:aa:a8:d1:12:11:27:95:48:9f:
         e5:e6:dc:16:7a:53:3a:4b:5a:e9:d5:bb:fb:04:09:db:53:0f:
         df:41:73:82:a0:06:40:1b:72:88:c0:79:3d:77:b5:d3:5f:36:
         98:e2:0a:19:a3:90:59:b2:3c:37:31:fe:07:5d:7d:4d:69:06:
         e9:fb:9a:31:f2:b6:97:4f:15:33:9a:c7:4a:3b:53:da:be:7e:
         9f:04:53:c6:c2:11:b7:d0:3e:49:f9:24:59:ef:b1:5f:07:bb:
         b7:b5:64:09:c9:14:03:a0:e5:32:be:2f:22:8f:09:ed:71:2d:
         e0:c4:36:49:81:7f:2a:8e:8b:58:21:22:a9:43:9e:80:0d:ef:
         0f:cc:7d:2c:c7:68:3d:86:58:5f:b7:37:a2:c7:9a:22:60:5d:
         2d:5e:e1:61:27:a2:bc:f0:5e:39:aa:4e:8c:73:44:b5:4b:e9:
         02:41:31:b5:36:08:a3:39:50:a7:2b:cf:d0:8a:60:3b:46:95:
         74:c8:ea:cd:75:7c:b2:38:e7:a0:34:f1:2e:9c:95:16:2a:e8:
         3f:39:50:29:61:08:c2:06:4a:e4:8c:28:99:c0:47:20:ad:7a:
         a2:03:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:38 2024 by rpki-client on console-ams.rpki-client.org